CyberRota
← Ana sayfaya dön

CVE-2026-14189

UNKNOWN · CVSS N/A

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-07-27T07:16:25.413 · Çekilme zamanı: 2026-07-27T12:09:40.199908+00:00

CyberRota Yorumu

SQL Injection riski içeriyor.

CVE
CVE-2026-14189
Severity
UNKNOWN
CVSS
N/A
EPSS
Yok
WordPress

Orijinal NVD Açıklaması

The WPBot WordPress plugin before 8.5.2 does not validate administrator-configured field identifiers before using them in a SQL query, allowing users with administrator access to perform SQL injection that executes when a visitor triggers a search.